PT-2017-14887 · Unknown · Website Auction Marketplace
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Website Auction Marketplace version 2.0.5
Description
The issue is related to SQL Injection, which occurs via the
cat id parameter in the "search.php" endpoint.Recommendations
For version 2.0.5, avoid using the
cat id parameter in the "search.php" endpoint until the issue is resolved. Consider restricting access to the search functionality to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Website Auction Marketplace